Re: Re: Re: Secure pages - Mailing list pgsql-php

From Martin A. Marques
Subject Re: Re: Re: Secure pages
Date
Msg-id 01031319422609.24705@math.unl.edu.ar
Whole thread Raw
In response to RE: Re: Re: Secure pages  ("Christian Marschalek" <cm@chello.at>)
Responses RE: Re: Re: Secure pages  ("Christian Marschalek" <cm@chello.at>)
List pgsql-php
El Mar 13 Mar 2001 19:23, Christian Marschalek escribió:
> Why not ask for a password, encrypt it (with 128bit or something;), check
> it with the database (which has the encyrpted pwds) and pass the encrypted
> password from page to page...
>
> like: <a href="blah.php?encryptedpassword">

Horrible idea!! Even with an encrypted password. Use PHP sessions, and save
any info on the session (this is saved on a temp file on the server, and only
the session handle is passed to the browser).


--
System Administration: It's a dirty job,
but someone told I had to do it.
-----------------------------------------------------------------
Martín Marqués            email:     martin@math.unl.edu.ar
Santa Fe - Argentina        http://math.unl.edu.ar/~martin/
Administrador de sistemas en math.unl.edu.ar
-----------------------------------------------------------------

pgsql-php by date:

Previous
From: Chris
Date:
Subject: RE: Re: Re: Secure pages
Next
From: "Christian Marschalek"
Date:
Subject: RE: Re: Re: Secure pages